Script Library

Use the change logon command to change the drain mode to one of the allowed values

QUERY
ENABLE
DISABLE
DRAIN
DRAINUNTILRESTART

Get and display Parallels RAS session information.
Run on a Connection Broker and as a user who has CU stored credentials on the machine where the script will run.

Show the status of all Parallels RAS agents.
Run on a Connection Broker and as a user who has CU stored credentials on the machine where the script will run.

This script uses the CUActions available in v8.8 onwards to force power off VMs on any supported hypervisor. It can be used as a right-click action or as an automated action by a trigger.

This script uses the CUActions available in v8.8 onwards to power on VMs on any supported hypervisor. It can be used as a right-click action or as an automated action by a trigger.

Check Profile Sizes examines user profiles for all or selected user accounts on the target machine, grouping the results by file type, using the extension.

For each group of files, if the size of the group exceeds a threshold (default 15% of the total profile size) the individual files are listed, sorted by path or by size (descending) and showing the actual file size in bytes.

To keep the output reasonably short, a threshold is set on the number of files shown individually per are listed by path (default 6) - beyond this, files are summarized by folder (order by count of files, descending).

Arguments:
ThresholdPercentToExpand (default: 15) - the threshold percent of the total profile size at which a file-extension group is listed.
SamAccountNameList (default: All) - the list of account names to be reported (comma-separated, any leading or trailing spaces will be trimmed). If set to All, the script will include local user and Active Directory user accounts.
SortBy (default: Size) - must be set to Size (individual files are listed by size, descending) or Path (individual files are listed by full path, ascending).
PreSummarySize (default: 6) - the number of files that will be listed individually (by group, according to the configured sort order) before the script switches to reporting files grouped by folder.

This script will test the connected virtual network of the machine, and validate if required outbound communication to use RDP Shortpath for public networks is open.

Show FSLogix currently mounted volume details and cross reference to FSLogix session information in the registry.

Add a public IP address if not already assisgned, launch mstsc to the public IP address, wait for mstsc to exit and then remove public IP address (if script assigned it)

Shadows Citrix, VMware, RDSH and WVD sessions

Gets the AVD Sessions hosts in the same pool as the target machine/session.

Pull all or just error, warning & critical event log entries from a given number of seconds before logon to a given number of seconds after logon.
Can assist in finding causes of slow or incorrect logons.

This AVD Script Based Action will retrieve the image information that is stored for the Hostpool.
README: https://support.controlup.com/hc/en-us/articles/360011378518

This AVD Script Based Action retrieves the user session information for a specified Hostpool.
README: https://support.controlup.com/hc/en-us/articles/360011378518

The AVD Script Based Action allows you to retrieve the AVD Application Groups for a specified Hostpool.
README: https://support.controlup.com/hc/en-us/articles/360011378518

Get Azure Virtual Desktop Session Host information of the machine/session.

Gets the details of the AVD Hostpool the target machine/session is in.
Requires credentials created with scrip AZ Store Azure Credentials

Parses the Profile log for FSLogix event for a specific user and displays the results.

Leverage MSTSC.exe for Shadow and remote control of sessions.

For troubleshooting see:
https://support.controlup.com/hc/en-us/articles/360000602929-Shadow-RDS-Session-without-prompt

Note for Win10: Make sure you are allowing "Remote Desktop -Shadow (TCP-In)" in the Firewall

This script creates a video of the entire user display area and saves it in a location of choice. This script requires ffmpeg.exe to be downloaded and placed in an accessible location.

This script gets the dimensions of the users working display area and takes screenshots. The screenshots can be saved as a BMP, JPG or PNG in a location of choice.

This script gets the dimensions of the users working display area and take a screenshot. The screenshot can be saved as a BMP, JPG or PNG in a location of choice.

Logs off the selected user session

This script will power off the selected vSphere VM

This script will power on a selected vSphere VM

Displays the titles of all visible windows running in the user session

Finds and optionally deletes local user profiles. The user can provide two arguments - the minimum profile age in days and the minimum profile size. The default operation mode is to display the profiles that fit these criteria. When the "Delete" option is set to "true", the script will delete the profiles it found.

For any file on the target computer for which the user provides the full path, displays a list of processes with open handles to the file. This is useful for determining which process is locking the file, preventing its deletion or editing in another program.
The action makes use of Sysinternals handle.exe, which is downloaded, extracted into a temporary location and deleted after completion.

This script displays a user's Name, Company, Title, Office, Office Phone Number, Mobile Phone Number and E-Mail Address if they exist in AD, as well as those same details for their Manager.

Requires the ActiveDirectory PowerShell module loaded on machine this is be exected from.

Created by Rory Monaghan.

This SBA will check the event logs and report the negotiated RDP version.

Logoff disconnected sessions on the selected computer(s) which have been disconnected in excess of a given period, specified in minutes.
Arguments:
Disconnected period - the time in minutes over which a user must have been disconnected before they are logged off (default is 10 minutes)

Disconnect or logoff sessions on the selected computer(s) which have been idle in excess of a given period, specified in minutes.
Arguments:
Idle Period - the time in minutes after which a disconnected session will be logged off or disconnected depending on the value for the "Logoff" argument (default is 30 minutes)
Logoff - if true, sessions idle in excess of the idle period will be logged off, otherwise they will be disconnected (default is false so sessions will be disconnected)

Cancels any "Message and Logoff" SBAs which are still running on the selected computer(s) by finding the associated PowerShell process and terminating it.
Arguments:
Cancellation Message - A message to display to the users so they can be informed that they will not be logged off (default is no mesage)

Send a message to all connected sessions and then log them all off after a specified amount of time. The message can be repeated at a specified interval if required.
For instance, a delay of 15 minutes can be set and the users messaged every 5 minutes with the text specified in the "Message Text" argument.
When the configured script timeout of 60 seconds is reached, an error will be displayed but the script will keep running. If you need to cancel the logoff once the script has timed out, run the "Cancel Logoffs" SBA for the same computer(s)
Arguments:
Message Text - The text of the message to display to all connected users on the selected computer(s)
Delay Before Logoff - The period in minutes from when the script is invoked to when all users will be automatically logged off by the SBA
Message Every - how often, in minutes, the same message is displayed to the remaining users. Specify zero or a blank value to not repeat the message after the initial display

Run gpresult for the selected user to get a list of scripts that ran at logon and show where they are located, including the containing GPO's name and GUID, so that it is easy to view the script contents with a view to troubleshooting, optimising, etc. It also shows the size of the script, any parameters passed to it and when it was last modified

Cancel a reboot scheduled via the Schedule Reboot action by finding and deleting the scheduled task created by the Schedule Reboot action

Shows established network connections for a process sorted on the most connections by processing netstat -ano output.
Arguments:
Show Top - Show the top n connections (default 1000)
Resolve IP to Name - Show DNS names rather than IP addresses (default false)
Resolve IP via RIPE - Use internet registrar API to resolve non-DNS resolvable names (default false)

Show user name, logon and logoff times of all users who have logged off, or been logged off, the selected computer(s) in the last x hours where x is an argument defaulting to 48. Useful to be able to spot if many users were logged off at a specific time.
Arguments:
Hours back to search - default is 48
User - optional user name to search for otherwise all users will be displayed

Use quser.exe to find disconnected sessions on the chosen computer and order on the most recently disconnected, showing the user's logon time too.
Arguments:
Hours Back to Check - how far back to look for disconnected sessions so those disconnected before this time will not be included (default is 24 hours)

This script looks for Folder Redirection errors (Event ID 502) that occurred on the selected managed computer within the last 30 days.

Run this SBA against one or more user sessions to lock that session. Taken from Stephen Owen's blog, https://foxdeploy.com/2016/12/15/locking-your-workstation-with-powershell/